CVE-2022-24521

Vulnerability updated 5 months ago (2024-05-04T19:13:56.307Z)
Download STIX
Preview STIX
CVE-2022-24521 is a software vulnerability discovered in 2022, characterized by a flaw in the software design or implementation. This specific vulnerability was exploited through modifications to BLF files and was one of four vulnerabilities (including CVE-2022-37969, CVE-2023-23376, and CVE-2023-28252) captured in the wild as zero-days. Zero-day vulnerabilities are software security flaws that are known to the software vendor but have no patch in place to fix them when they are exploited. The exploitation of these vulnerabilities was part of a broader trend identified in the "Windows Common Log File System Driver Elevation Of Privilege Vulnerability". Since 2018, at least thirty-two such vulnerabilities have been discovered, excluding CVE-2023-28252. Notably, three of these vulnerabilities (CVE-2022-24521, CVE-2022-37969, and CVE-2023-23376) were detected in the wild as zero-days, indicating that attackers were able to exploit these vulnerabilities before patches were available. In response to the increasing number of security bugs, Microsoft has released patches for 96 other security bugs as part of April’s Patch Tuesday, including 45 remote code execution vulnerabilities. These efforts underscore the ongoing need for vigilance and swift action in addressing software vulnerabilities, particularly those that can be exploited as zero-days.
Description last updated: 2024-05-04T16:33:22.007Z
What's your take? (Question 1 of 5)
Help tune the shared Cybergeist dataset, assist your peers, and earn karma. Expand the panel to get started.
Aliases We are not currently tracking any aliases
Miscellaneous Associations
Other elements of context that could aid in the identification of relevance
Vulnerability
Windows
Exploits
Ransomware
Kaspersky
Analyst Notes & Discussion
Be the first to leave your mark here! Log in to share your views and vote.
Associated Vulnerabilities
To see the evidence that has resulted in these vulnerability associations, create a free account
Alias DescriptionAssociation TypeVotes
The CVE-2023-28252 Vulnerability is associated with CVE-2022-24521. CVE-2023-28252 is a critical Elevation of Privilege vulnerability found in the Windows Common Log File System (CLFS) driver. This flaw was discovered by Kaspersky researchers while preventing attacks on users, marking it as a zero-day vulnerability. The vulnerability presents a significant risk withUnspecified
3
The CVE-2023-23376 Vulnerability is associated with CVE-2022-24521. CVE-2023-23376 is a software vulnerability, specifically an elevation-of-privilege flaw found in the Windows Common Log File System Driver. This vulnerability allows an attacker to gain system-level privileges, posing a significant risk to unpatched Windows systems. It is similar to another exploit,Unspecified
3
The vulnerability CVE-2022-37969 is associated with CVE-2022-24521. Unspecified
3
Source Document References
Information about the CVE-2022-24521 Vulnerability was read from the documents corpus below. This display is limited to 20 results, create a free account to see more
PreviewSource LinkCreatedAtTitle
CERT-EU
9 months ago
CERT-EU
9 months ago
CERT-EU
10 months ago
CERT-EU
10 months ago
DARKReading
10 months ago
CERT-EU
10 months ago
Securelist
10 months ago
Securelist
10 months ago
Securelist
10 months ago
Securelist
10 months ago
Securelist
10 months ago
CERT-EU
10 months ago
CISA
2 years ago
CISA
2 years ago
CERT-EU
2 years ago
Securelist
a year ago
CSO Online
a year ago